INFORMATION ON THE PROCESSING OF PERSONAL DATA
Pursuant to Article 13 of EU Regulation no. 679/2016
In order to process personal data in a correct and transparent manner, Lorella Tamberi Canal addresses the following information, drawn up pursuant to Article 13 of EU Regulation no. 679/2016 “on the protection of natural persons with regard to the processing of personal data
”) and to Legislative Decree no. 196/2003 (“Privacy Code”), as amended by Legislative Decree no. 101/2018 – intended for all those who visit and/or interact with the e-commerce website www.lorellatambericanal.com
I. Data controller – Who processes your data?
The data controller who processes your data is Lorella Tamberi, VAT number 06915420969, Economic Administrative Index of Milan No. 1926041, with registered office in Milan (MI), Via Bartolomeo Panizza, 8 (“Controller”).
You may contact the Controller at the following addresses:
a) Telephone: (+39) 3483080693;
b) Mail: Via Bartolomeo Panizza n. 8, Milano (MI);
c) E-mail: firstname.lastname@example.org;
d) Certified e-mail: email@example.com.
II. Subject-matter of the processing – Which data do we process?
The Controller collects and processes the following personal data:
a) Personal data directly provided by the data subject: personal data, non-sensitive identification data (such as name, last name, e-mail address), address for the delivery of the purchased products, bank data, credit card details, list of products and services required and/or purchased;
b) Personal data not directly provided by the data subject: personal data automatically collected during the web browsing on LTCJ (such as the accesses to a certain page, the quantity of data transferred, ID number, IP number, URL addresses, cookies, etc.) or communicated to us by third parties in performance of a contract (such as the communication, by the carrier, that the ordered products have been delivered).
III. Purposes and legal basis of the processing – Why do we process your personal data?
The Controller may process your data, even with the aid of electronic means, to:
1. Allow the web browsing on LTCJ:
Some of your personal data may be automatically collected during the browsing on LTCJ. In order to process some of these data, it is necessary to acquire your consent (e.g., cookie analytics), while your consent is not necessary to acquire some other data (e.g., technical cookies). In fact, it is a legitimate interest
of the Controller to ensure the browsing security on LTCJ and its smooth functioning (in accordance with the legal basis provided for under Article 6, paragraph 1, lett. f) of GDPR). Without prejudice to the provisions of section VI, lett. c), you have the right to object in any moment, for reasons related to your personal situation, to the processing of your data performed for this specific purpose. To exercise such right, you may modify your cookies preferences or contact the Controller at one of the addresses listed under Section I.
. If you are simply browsing on LTCJ, this is the only processing that we perform on your personal data.
2. Complete the registration on LTCJ and access to your personal area:
Your personal data may be processed in order to complete the registration on LTCJ and to access to the services reserved to registered users.
This processing is necessary “in order to take steps at the request of the data subject prior to entering into a contract”, in accordance with the legal basis provided for under Article 6, paragraph 1, lett. b) of GDPR. The provision of personal data for this purpose is discretionary, therefore failing to provide such data shall not imply the impossibility to browse on LTCJ or to purchase the products on sale. For this processing, your personal data will be retained until the deletion of your account (taking into account the technical time to do so).
3. Allow the purchase of products on LTCJ:
Your personal data may be processed to conclude purchase contracts on LTCJ and to correctly perform the obligations deriving from them, such as, by way of example, the payment and delivery of the purchased products.
This processing is necessary, according to the circumstances, “for the performance of a contract to which the data subject is party” or “in order to take steps at the request of the data subject prior to entering into a contract”, in accordance with the legal basis provided for under Article 6, paragraph 1, lett. b) of GDPR. The provision of personal data for this purpose is mandatory, therefore failing to provide such data shall imply the impossibility to conclude the contract.
For this processing, your personal data will be retained for the duration of the contract and, after is termination, until the expiry of the limitation period (10 years). In case of litigation, your personal data shall be retained for the entire duration of it and until the exhaustion of the time limits of practicability of all appeal actions.
4. Respond to your requests:
Your personal data may be processed to work on and answer to your requests of information, of assistance or of other nature sent to us.
This processing is necessary, according to the circumstances, “for the performance of a contract to which the data subject is party” or ““in order to take steps at the request of the data subject prior to entering into a contract” (in accordance with the legal basis provided for under Article 6, paragraph 1, lett. b) of GDPR), or in execution of a legitimate interest of the Controller (in accordance with the legal basis provided for under Article 6, paragraph 1, lett. f) of GDPR). In fact, it is a legitimate interest of the Controller to answer all requests of information and/or reports and/or complaints and/or claims of data subject (to which, anyway, the Controller is legally obliged to answer, in his role as LTCJ manager, pursuant to the provisions of the Consumer Code).
Moreover, such legitimate interest of the Controller coincides with the interest of the same data subjects who made the requests and who may reasonably expect that their personal data will be processed by the Controller to give them an answer.
The legitimate interest as identified above may be considered as prevailing on the rights and freedoms of the data subject.
The provision of personal data for this processing is mandatory, therefore failing to provide such data shall imply the impossibility to answer your requests. For such purpose, the Controller shall retain your personal data for 2 years from the receipt of the request. Without prejudice to the provision of Section VI, lett. c), you have the right to object in any moment, for reasons related to your personal situation, to the processing of your data performed for this specific purpose. To exercise such right, you may contact the Controller at one of the addresses listed under Section I.
5. Send to you informative or commercial communications.
Your personal data may be processed for generic marketing purposes, consisting in sending, at the e-mail address provided during the registration or during a purchase, of informative or promotional communications, like the newsletter, discount coupons and special offers referred to the products on sale on LTCJ.
The legal basis for this processing is the express consent (pursuant to Article 6, paragraph 1, lett. a) of GDPR) or, according to the circumstances, the execution of the contract (pursuant to Article 6, paragraph 1, lett. b) of GDPR.
If you change your mind, you may withdraw your consent in any moment, or object to this processing, contacting the Controller at one of the addresses listed under Section I or via the “unsubscribe” link put in any promotional communication sent by the Controller.
The provision of personal data for this processing is discretionary, there is no legal or contractual obligation on you. For the purpose of generic marketing, the Controller shall retain your data until the withdrawal of consent or, in any case, for no longer than 4 years from the collecting of the data, reserving the right to request, before the expiry of said time limit, to renew the consent and/or update the date.
6. Comply with administrative, accounting and fiscal obligations.
Your personal data may be processed in order to comply with the obligations incumbent on the Controller, with specific reference to the administrative, accounting and fiscal ones. The legal basis for this processing is “compliance with a legal obligation which the controller is subject” (pursuant to Article 6, paragraph 1, lett. c) of GDPR).
The provision of personal data for this processing is mandatory, therefore failing to provide such data shall imply the impossibility to provide the requested services. The retention period of the data collected for such purpose is set in accordance with the specific provisions applicable from time to time (10 years or even more, in case of tax assessment).
7. Allow the exercise of your rights.
The Controller may process your personal data to:
a) Respond to requests for the exercise of the right of withdrawal and/or for the exercise of the legal guarantee of conformity and/or of other rights arising from the contract concluded on LTCJ and/or provided for by law and related to said contract and/or related to other services provided on LTCJ;
b) Take the necessary steps as a result of the exercise of such rights and to proceed, if needed, with the refund;
c) Receive and answer to the request of exercise of rights related to the protection of personal data, as provided for by GDPR, and perform all the consequent activities.
The legal basis for this processing is “compliance with a legal obligation which the controller is subject” (pursuant to Article 6, paragraph 1, lett. c) of GDPR). For this purpose, the Controller shall retain your data until the exhaustion of the time limits of practicability of all appeal actions and, in any case, for no longer than the maximum time limits provided for by GDPR and/or the law.
8. Exercise our rights.
The Controller may process your personal data for the ascertainment, exercise or defence of a right before all the competent authorities. The legal basis for this processing is the legitimate interest (pursuant to Article 6, paragraph 1, lett. f) of GDPR). In fact, it is a legitimate interest of the Controller to undertake remedies in order to ensure the protection of its contractual rights, or to prove its compliance with the obligations arising from the contract with the data subject or imposed to the Controller by the law. Said legitimate interest, moreover, finds its foundation in the constitutionally protected right of defence. This interest can be considered as prevalent on the rights and freedoms of the data subject.
For this purpose, the Controller shall retain your personal data until the exhaustion of the time limits of practicability of all appeal actions and, in any case, for no longer than the maximum time limits provided for by GDPR and/or the law.
Without prejudice to the provision of section VI; lett. c), you have the right to object in any moment, for reasons related to your personal situation, to the processing of your data performed for this specific purpose. To exercise such right, you may contact the Controller at one of the addresses listed under Section I.
IV. Data disclosure – Who are the recipients of your personal data?
Your personal data shall be processed exclusively by employees and collaborators of the Controller, or by companies expressly appointed as data processor.
If applicable, your personal data shall be disclosed exclusively to the following recipients:
a) Data processors (lawyers, advisors, accountants and other professionals who provide functional services for the purposes indicated above);
b) Credit institutions, financial and insurance intermediaries which provide functional services for the purposes indicated above;
c) Subjects who process data in execution of specific legal obligations;
d) Judicial or administrative authorities, for the fulfilment of legal obligations.
Your personal data will not be disseminated, disclosed or made available to undetermined subjects, in any form.
V. Data transfer – Are your personal data transferred?
The Controller does not
transfer your personal data to recipients in third countries or international organisations.
VI. Rights of the data subjects – What are your rights?
GDPR grants you, as a data subject, some important rights that you can exercise against the Controller.
According to the GDPR, you are granted the right to:
a) Request the access
to your personal data and to the information related to them (pursuant to Article 15 of GDPR); request the rectification
of inaccurate personal data or to have incomplete personal data completed (pursuant to Article 16 of GDPR); request the erasure
of personal data concerning you (if one of the grounds provided for by Article 17, paragraph 1, of GDPR applies and in compliance with the exceptions as per paragraph 3 of said Article); request the restriction of processing of your personal data (if accordance with the conditions provided for by Article 18, paragraph 1, of GDPR);
b) Request and obtain from the Controller – in cases where the legal basis is the execution of the contract or consent and the processing is performed via of automated means – the personal data provided to the Controller, in a structured, commonly used and machine-readable format, also with a view to transmit those data to another controller (the so-called right to data portability
, provided for by Article 20 of GDPR);
in any time to a processing of your personal data which has a legitimate interest as the legal basis (pursuant to Article 21 of GDPR). In case the right to object is exercised, the Controller must refrain from processing any further your personal data, unless they demonstrate the existence of legitimate reasons to proceed with the processing, which are prevailing on the interests, rights and fundamental freedoms of the data subject or that are necessary to ascertain, exercise or defend a right in court;
d) Withdraw your consent
in any moment, limitedly to the cases where the processing is based on your consent for one or more specific purposes and it regards common personal data (such as date and place of birth or the place of residence), or special categories of personal data (such as data revealing your racial origin, political opinions, religious beliefs, state of health o sexual life), without prejudice to the lawfulness of the processing performed before the withdrawal of consent (pursuant to Article 13, paragraph 2, lett c.) of GDPR);
e) Lodge a complaint
with a supervisory authority (Autorità Garante per la protezione dei dati personali – garanteprivacy.it
) (pursuant to Article 13, paragraph. 2, lett. d) of GDPR).
VII. Timings and modes of response in case of exercise of a right – When and how will you receive an answer after having exercised a right?
Pursuant to Article 12 of GDPR, the Controller shall provide any information on actions taken on a request of exercise of right without undue delay and, in any event, within one month of receipt of the request. That period may be extended by two further months where necessary, taking into account the complexity and number of requests. The Controller shall inform the data subject of any such extension within one month of receipt of the request, together with the reasons for the delay. Where the data subject makes the request by electronic form means, the information shall be provided by electronic means where possible, unless otherwise requested by the data subject.
Last update: January 27, 2022
Cookies are short text files that are downloaded and saved in the terminal (computer / smartphone / tablet) of the user when accessing certain websites and that are stored therein.
Cookies allow, among other things, to store and retrieve information relating to the user’s browsing habits, to view the visited pages and the connection time, to analyze the operations, to check for technical problems, etc.
Depending on the information they contain and on how the terminal is used, cookies can be utilized to recognize the user.
Cookies are distinguished according to different classification criteria.
In relation to the ownership:
a) Own cookies
. They are the cookies of Lorella Tamberi.
b) Third-party cookies
. They are cookies owned by a third party, different from Lorella Tamberi, which will process the obtained information.
In relation to the purpose:
a) Technical and / or custom cookies
. They are those that serve to improve navigation, identify problems, recognize the user, etc.
b) Analytical and / or profiling cookies. They are used to collect information on navigation and to send advertising messages, generic or customized. LTCJ does not use profiling cookies.
What are cookies for?
Cookies are used to offer personalized services and / or advertising, to analyze the operation of the system, to recognize the user at the time of access, to identify problems and solve them as quickly as possible, as well as to analyze and monitor the use and activity of the web page.
Is my consent necessary to install a cookie?
No consent is required for the installation of technical cookies or of those strictly necessary to the supplier for the provision of a service expressly requested by the recipient. For everything else, user consent is necessary and can be requested in various ways. In the case of LTCJ, consent is understood to be given if the user continues browsing on LTCJ.
However, the user may revoke this consent and deactivate cookies at any time.
What cookies are used by LTCJ?
Technical: OWN, session, identification, configuration and registration cookies are those strictly necessary for the identification of the user and for the provision of the services by him requested. The information obtained through these cookies is solely processed by LTCJ.
Statistical: The services contained in this section allow the Data Controller to monitor and analyse traffic data and are used to keep track of user behaviour.
Google Analytics with anonymized IP (Google Inc.)
Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses Personal Information collected for the purpose of tracking and examining the use of this Application, compiling reports and sharing them with other services developed by Google.
Google may use the Personal Data to contextualise and personalize the advertisements of its advertising network.
This integration of Google Analytics makes your IP address anonymous. Anonymisation works by shortening the IP address of the users within the borders of the member states of the European Union or in other countries participating in the agreement on the European Economic Area. Only in exceptional cases, the IP address will be sent to Google’s servers and shortened within the United States.
Personal Data collected: Cookies and Usage Data.
Contact: by registering with the mailing list or the newsletter, the user’s email address is automatically added to a list of contacts to which email messages containing information, including commercial and promotional information, relating to LTCJ may be transmitted. The user’s email address may also be added to this list as a result of registering on LTCJ or after making a purchase.
Personal Data collected: name, surname, date and place of birth, e-mail address.
Interaction with social networks: this type of services allows interaction with social networks, or other external platforms, directly from the pages of LTCJ. The interactions and information acquired from LTCJ are in any case subject to the privacy settings of the user relating to each social network. In the event that an interaction service with social networks is installed, it is possible that, even if the users do not use the service, it collects traffic data relating to the pages in which it is installed.
Cookies used on the website:
Strictly Required Cookies
Reporting And Analytics
Marketing And Retargeting
How to install or remove cookies from the terminal:
Default settings for the majority of browsers provide for accepting of cookies, but the user can change these settings by changing the browser configurations. There are also various kinds of software that may change cookies, such as web services or additional browser components.
It is possible to block all kinds of cookies, or to accept only some of them and disable others. The section “settings” or “preferences” in the browser’s menu allows to avoid interacting with some cookies and with other tracking technologies, and to be notified when such technologies are in use. Alternatively, it is also possible to consult the section “help” in the navigation toolbar, which is present in most browsers.
For more information about cookies and on how to manage your cookies preferences (first-party and third-party cookies), users are invited to visit the platform www.youronlinechoices.com. It is also to be noted that, in some cases, disabling the cookies may cause the misfunctioning of the website and/or limit the service offered.